ISO/IEC 27001 is an international standard on how to manage
information security. The standard was originally published jointly by the
International Organization for Standardization and the International
Electrotechnical Commission in 2005 and then revised in 2013.